Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-25041

Опубликовано: 27 апр. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*
Версия до 1.9.5 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 46%
0.00232
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
redhat
около 6 лет назад

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
debian
почти 5 лет назад

Unbound before 1.9.5 allows an assertion failure via a compressed name ...

CVSS3: 7.5
github
больше 3 лет назад

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.

CVSS3: 7.5
fstec
около 6 лет назад

Уязвимость функции dname_pkt_copy DNS-сервера Unbound, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 46%
0.00232
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-617